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Access control: First experiences using XACML for access control in 
distributed systems 

Markus Lorch, Seth Proctor, Rebekah Lepro, Dennis Kafura, Sumit Shah 
October 2003 Proceedings of the 2003 ACM workshop on XML security 

Full text available* ^tpdf(459 30 KB) Additional Information: full citation , abstract , references , citings , index 
^ terms, .review 

Authorization systems today are increasingly complex. They span domains of 
administration, rely on many different authentication sources, and manage 
permissions that can be as complex as the system itself. Worse still, while there 
are many standards that define authentication mechanisms, the standards that 
address authorization are less well defined and tend to work only within 
homogeneous systems. This paper presents XACML, a standard access control 
language, as one component of a distributed a ... 

Keywords: access control decision, access control enforcement, authorization, 
distributed system security, policy language, policy management 
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Overload management policies avoid network congestion by actively dropping 
packets. This paper studies the effect that such data dropouts have on the 
performance of spatially distributed control systems. We formally relate the 
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spatially-distributed system's performance (as measured by the average output 
signal power) to the data dropout rate. This relationship is used to pose an 
optimization problem whose solution is a Markov chain characterizing a dropout 
process that maximizes control system p ... 

Keywords: networked control systems, overload management, sensor-actuator 
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Today there is widespread application of digital control circuitry in a wide range of 
products. This paper describes a simulation system in which the designer of these 
control circuits can interact with his design ideas before they are implemented in 
hardware. The Digitial Control Simulation System (DCSS) is a digital design 
description language with a set of programs to generate and execute a simulation 
program. The main use of this system (with an appropriate hardware interface ... 

5 Emulation as a design tool in the development of real-time control systems 
Howard M. Bloom, Cita M. Furlani, Anthony L Barbera 

January 1984 Proceedings of the 16th conference on Winter simulation 

Full text available: "f|}.pdf(71 5..0J5 KB) Additional Information: fuJJ. citation, abstract, references, jndex terms 

A major facility for manufacturing research is being established at the National 
Bureau of Standards. The Automated Manufacturing Research Facility (AMRF) will 
provide testbed where measurement research of computer integrated 
manufacturing systems can be performed. The control architecture of the facility is 
based on a sensory-interactive, modular, hierarchical, feedback system. Each 
module is represented as a finite state machine that interacts through a shared 
time-sliced common-memory wh ... 

6 Automating the design of microprocessor-based real time control systems 
M. N. Matelan 

June 1976 Proceedings of the 13th conference on Design automation 

Full text available* 11|pdf(853 17 KB) Addit i° na| Information: full citation , abstract , references , citings , index 
^ terms 

Many facets of Computer Science and associated technologies may be profitably 
viewed as dedicated real time control activities. Production of systems to exercise 
such control has been difficult and costly. An abstract model of the process of 
producing these systems is presented. The model indicates three areas of the 
design problem amenable to automation: I) the selection and configuration of 
hardware; 2) the production of software, and 3) the selection- of a monitor to 
maintain real time in ... 
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The concept of hierarchical, multilevel control systems is reviewed in the context of 
manufacturing systems, and the strata typically composing such control systems 
are discussed. The possibility of building simulation models of hierarchical 
systems, using FORTRAN routines to represent the higher-level strata, and GPSS to 
model the actual manufacturing steps themselves, is introduced. A hypothetical, 
nine-product toy-manufacturing system is described, and some of the specific 
features of a ... 



8 Access Control Models and Mechanisms: Cryptographic access control in a 
distributed file system 
Anthony Harrington, Christian Jensen 

June 2003 Proceedings of the eighth ACM symposium on Access control 
models and technologies 

Full text available: ^.p.^{24£.24.KB) Additional Information: fuN^citation, abstract, references, index terms 

Traditional access control mechanisms rely on a reference monitor to mediate 
access to protected resources. Reference monitors are inherently centralized and 
existing attempts to distribute the functionality of the reference monitor suffer 
from problems of scalability. Cryptographic access control is a new distributed 
access control paradigm designed for a global federation of information systems. It 
defines an implicit access control mechanism, which relies exclusively on 
cryptography to provide ... 

Keywords: access control, cryptography, network file systems 



9 Concurrency control in hierarchical multidatabase systems 
Sharad Mehrotra, Henry F. Korth, Avi Silberschatz 

May 1997 The VLDB Journal — The International Journal on Very Large Data 

Bases, Volume 6 Issue 2 
Full text available: ^.pdf(41.8.55KBJ Additional Information: MLSftatioQ. abstract, citings, index terms 

Over the past decade, significant research has been done towards developing 
transaction management algorithms for multidatabase systems. Most of this work 
assumes a monolithic architecture of the multidatabase system with a single 
software module that follows a single transaction management algorithm to ensure 
the consistency of data stored in the local databases. This monolithic architecture 
is not appropriate in a multidatabase environment where the system spans 
multiple different organization ... 

Keywords: Concurrency control, Database management, Distributed databases, 
Multidatabase management 



10 A hierarchical access control model for video database systems 

Elisa Bertino, Jianping Fan, Elena Ferrari, Mohand-Said Hacid, Ahmed K. Elmagarmid, 
Xingquan Zhu 

April 2003 ACM Transactions on Information Systems (TOIS), Volume 21 Issue 2 
Full text available: pdf(6.27 MB) Additional Information: full citation , abstract , references , index terms 

Content-based video database access control is becoming very important, but it 
depends on the progresses of the following related research issues: (a) efficient 
video analysis for supporting semantic visual concept representation; (b) effective 
video database indexing structure; (c) the development of suitable video database 
models; and (d) the development of access control models tailored to the 
characteristics of video data. In this paper, we propose a novel approach to 
support multilevel acce ... 
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11 A utility-based power-control scheme in wireless cellular systems 
Mingbo Xiao, Ness B. Shroff, Edwin K. P. Chong 

April 2003 IEEE/ ACM Transactions on Networking (TON), Volume 11 Issue 2 

Full text available- fH) pdf(650 72 KB) Addit " ona ' Information: fuj[citatiqn, abstract, references, citings, index 
terms 

Distributed power-control algorithms for systems with hard signal-to-interference 
ratio (SIR) constraints may diverge when infeasibility arises. In this paper, we 
present a power-control framework called utility-based power control (UBPC) by 
reformulating the problem using a softened SIR requirement (utility) and adding a 
penalty on power consumption (cost). Under this framework, the goal is to 
maximize the net utility, defined as utility minus cost. Although UBPC is still 
noncooperative and dis ... 

Keywords: Nash equilibrium, Pareto optimal, admission control, cellular system, 
distributed algorithm, fairness, power control, robustness, signal-to-interference 
ratio (SIR), stability, utility function, wireless 



12 Session 10: meeting support: FlySPEC: a multi-user video camera system with Q 

Qiong Liu, Don Kimber, Jonathan Foote, Lynn Wilcox, John Boreczky 
December 2002 Proceedings of the tenth ACM international conference on 
Multimedia 

Full text available: l | | pdf(311.32 KB) Additional Information: full citation , abstract , references , citings 

FlySPEC is a video camera system designed for real-time remote operation. A 
hybrid design combines the high resolution of an optomechanical video camera 
with the wide field of view always available from a panoramic camera. The control 
system integrates requests from multiple users so that each controls a virtual 
camera. The control system seamlessly integrates manual and fully automatic 
control. It supports a range of options from untended automatic to full manual 
control. The system can also le ... 

Keywords: collaborative and automatic camera control, distance learning, gesture 
based camera control, panoramic video, video communication, video conferencing, 
video production, webcams 
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Sumant Kowshik, Dinakar Dhurjati, Vikram Adve 

October 2002 Proceedings of the 2002 international conference on Compilers, 
architecture, and synthesis for embedded systems 

Full text available- W[ pdf(127 10 KB) Additional Information: full citation , abstract , references , citings , index 
terms 

This paper considers the problem of providing safe programming support and 
enabling secure online software upgrades for control software in real-time control 
systems. In such systems, offline techniques for ensuring code safety are greatly 
preferable to online techniques. We propose a language called Control-C that is 
essentially a subset of C, but with key restrictions designed to ensure that memory 
safety of code can be verified entirely by static checking, under certain system 
assumpti ... 
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June 1988 Proceedings of the first international conference on Industrial and 
engineering applications of artificial intelligence and expert 
systems - Volume 2 

Full text available: ffij?*(85481JKBJ Additional Information: fuJIcitation, references, citings, index terms 



15 Optimistic simulation II: Software control systems for parallel simulation 
Radharamanan Radhakrishnan, Philip A. Wilsey 

May 2002 Proceedings of the sixteenth workshop on Parallel and distributed 
simulation 

Full text available: f||pdf(840.92 KB) 

sf * Additional Information: fuH.citation, abstract, references 

*®)' Publisher Site 



Parallel simulations using optimistic synchronization strategies such as Time Warp, 
operate with no regard to global synchronization since this results in greater 
parallelism and lower synchronization cost. However, like virtual memory, the 
parallel simulators may end up thrashing instead of performing useful work. The 
complication in using a Time Warp simulator is then to configure it suitably for 
good performance and avoid thrashing. Unfortunately, the optimal configuration is 
not generally st ... 

Keywords: Parallel Discrete-Event Simulation, Time Warp, Run-time Control, 
Distributed Simulation, Control Theory 



V. K. Chawla, R. K. Ragade, P. B. Deshpande 

June 1988 Proceedings of the first international conference on Industrial and 
engineering applications of artificial intelligence and expert 
systems - Volume 1 

Full text available: ^pdf(60274JKB_) Additional Information: full, citation, abstract, refef.eO.ces, index terms 

Design and implementation of effective control systems is vital to the 
competitiveness of the process industry. Process control system design requires 
knowledge based systems which are capable of efficient numeric computing along 
with the symbolic reasoning. A brief survey presented in this paper shows that 
many industrial and academic research groups, are actively developing such 
knowledge based tools, in the U.S. and other countries. ProCEED, the expert 
system described in this ... 

17 Agent-based modeling and simulation: A simulation test-bed to evaluate 
multi-agent control of manufacturing systems 
Robert W. Brennan, William O 

December 2000 Proceedings of the 32nd conference on Winter simulation 

Full text available: ^| |pdf(268.03 KB) Additional Information: full citation , abstract , references 

Current research in the area of manufacturing planning and control has moved 
away from traditional centralized solutions towards distributed architectures that 
range from hierarchical to heterarchical. Between these two extremes of the 
control architecture spectrum lies the holonic manufacturing systems paradigm, 
where partial dynamic hierarchies of agents cooperate to meet global system 
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objectives in the face of disturbances. This paper describes a simulation test bed 
for the evaluation of a di ... 

18 Special issue on critical analyses of ERP systems: the macro level: The control 
devolution: ERP and the side effects of globalization 
Ole Hanseth, Claudio U. Ciborra, Kristin Braa 
September 2001 ACM SIGMIS Database, Volume 32 Issue 4 

Full text available- ^ flpdf(1.41 MB) Add fi° na l Information: MLsMQfi. 3!?.?M<?i M§r§!lSS!§, citings, index 

terms 

When looking at the implementation of ERP systems in large organizations, the 
typical business concerns are attaining the goals of the application, usually 
globalization and efficiency, securing the organization's acceptance, avoiding 
rigidity, and so on. By now, the literature is full of both normative models on how 
to implement ERPs successfully and cautioning tales of how the road to success is 
paved by traps, slowdowns, and even disillusion. This paper does not take sides in 
this emerging li ... 

Keywords: Control, Enterprise Resourse Planning, Globalization 



19 A fine-grained access control system for XML documents 

Ernesto Damiani, Sabrina De Capitani di Vimercati, Stefano Paraboschi, Pierangela 
Samarati 

May 2002 ACM Transactions on Information and System Security (TISSEC), 

Volume 5 Issue 2 

Full text available: f§ pdf(330. 60 KB ) Additional Information: M.ctefion, abstract, references, citings, index 

Web-based applications greatly increase information availability and ease of 
access, which is optimal for public information. The distribution and sharing of 
information via the Web that must be accessed in a selective way, such as 
electronic commerce transactions, require the definition and enforcement of 
security controls, ensuring that information will be accessible only to authorized 
entities. Different approaches have been proposed that address the problem of 
protecting information in a Web ... 

Keywords: Access control, World Wide Web, XML documents, authorizations 
specification and enforcement 



20 Distributed admission control for power-controlled cellular wireless systems H 
Mingbo Xiao, Ness B. Shroff, Edwin K. P. Chong 

December 2001 IEEE/ACM Transactions on Networking (TON), Volume 9 Issue 6 

Full text available* fU pdf(219 23 KB) Additional Information: full citation , abstract , references , citings , index 
' J : terms 

It is well known that power control can help to improve spectrum utilization in 
cellular wireless systems. However, many existing distributed power control 
algorithms do not work well without an effective connection admission control 
(CAC) mechanism, because they could diverge and result in dropping existing calls 
when an infeasible call is admitted. In this work, based on a system parameter 
defined as the discriminant, we propose two distributed CAC algorithms for a 
power-controlled system. Und ... 

Keywords: Cellular system, connection admission control, distributed admission 
control, power control, signal-to-interference ratio, wireless 
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